Merge pull request #3763 from kushaldas/fix_file_handling_3758

Fixes #3758 checks file value before accessing it
freedomofpress · Aug 31, 2018 · 6098d75 · 6098d75
2 parents 91ef65a + 4132731
commit 6098d75
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/securedrop/source_app/main.py b/securedrop/source_app/main.py
@@ -124,7 +124,9 @@ def lookup():
     @login_required
     def submit():
         msg = request.form['msg']
-        fh = request.files['fh']
+        fh = None
+        if 'fh' in request.files:
+            fh = request.files['fh']
 
         # Don't submit anything if it was an "empty" submission. #878
         if not (msg or fh):